cevado-sql.txt

I'm back, and I got more. SQL injection within some real estate CMS software. The vulnerability is present because of a failure to strip characters from the variables pageid and siteid resulting in exploitation by some simple blind SQLI. heres an example:...

phpMyAdmin < 2.11.5 SQLi

Binary data 4407.prm...

vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

aflog 1.01 comments.php XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= aflog 1.01 comments.php XSS / SQL Injection Vulnerability ========================================================= Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/...

aflog 1.01 - Cross-Site Scripting / SQL Injection

Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like this:...

MOG-WebShop - 'index.php?group' SQL Injection

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3 Vendor : http://mog-site.com/ Demo...

MOG-WebShop - index.php?group SQL Injection

MOG-WebShop - index.php?group SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop |...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

revista112.txt

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------------------ Revista is a simple spanish PHP...

Exponent CMS < 0.96.4 Multiple Remote Vulnerabilities (XSS, SQLi, Code Exe, Disc)

The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to sanitize input to the 'id' parameter of the resource module before using it in database queries. An unauthenticated attacker can...

Merak Webmail / IceWarp Web Mail < 7.5.2 Multiple Vulnerabilities

Merak Webmail / IceWarp Web Mail is prone to multiple cross-site scripting XSS, HTML and SQL injection SQLi, and PHP source code disclosure vulnerabilities. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

XOOPS 2.0.11 && Earlier Multiple Vulnerabilities

GulfTech Security Research June 28th, 2005 Vendor : XOOPS URL : http://www.xoops.org/ Version : XOOPS 2.0.11 And Earlier Risk : Multiple Vulnerabilities Description: XOOPS is a very popular dynamic web content management system written in Object Oriented PHP. One of the features of XOOPS is it's...